Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, idempotentHint=true, destructiveHint=false), the description discloses the actual side effect profile: it is recorded as a signal for desk review and counted per page, but 'does not mark the page verified, change its date or reorder any list, and the page itself does not change.' It also explains the refusal conditions and confirms idempotency in plain language ('The same confirmation sent twice is recorded once'), which is exactly the kind of context annotations cannot carry.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.